5956 matches found
MAL-2025-152052 Malicious code in aji-14 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ce31f2939cfe7c3f34967014da0bc639f9a027d0095a7456963e4f443445734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in icha-14 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0638eae12e41420169d6576544c156da73d1ed0513d74848c5f6008ebd8ee15d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-156213 Malicious code in ilang-14 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 598cde3a5005d5419030b7e4251f9ff58e4a093a8f85758d7d64dd482816f14c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2024-57695
creationtimestamp| type| source ---|---|--- 2025-11-11 15:40:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5ehvfw23r2n 2025-11-11 17:41:29+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5eon25pjmp2...
EUVD-2025-74587
Malicious code in hardbandicootcrimson-14 npm...
MAL-2025-111965 Malicious code in hard_bandicoot_crimson-14 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1585a72d52b4d5d389e55b1a52dd55e5d7015b0be8de5a4e871e6add59f9eb46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-74913
Malicious code in acceptedslothfuchsia-14 npm...
EUVD-2025-74867
Malicious code in badlobstergreen-14 npm...
EUVD-2025-74461
Malicious code in metropolitanmackerelsalmon-14 npm...
Malicious code in constant_peacock_emerald-14 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ee0a0d9c8c2847ba98f2c7cfe72f66a973abc50b9425dec71962bb81a916f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-77490
Malicious code in trickykingfishercrimson-14 npm...
CVE-2025-64529
creationtimestamp| type| source ---|---|--- 2025-11-11 01:31:14+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5cygmzzw552...
CVE-2025-4952
creationtimestamp| type| source ---|---|--- 2025-10-31 14:26:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4iontmsdz2w...
AZL-69302 CVE-2025-58183 affecting package moby-engine for versions less than 25.0.3-14
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a...
GHSA-RJ5C-58RQ-J5G5
creationtimestamp| type| source ---|---|--- 2025-10-28 22:37:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115454183590681546...
CVE-2025-40077
creationtimestamp| type| source ---|---|--- 2025-10-28 14:57:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4b6yv5bi22p 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...
CVE-2025-11989
creationtimestamp| type| source ---|---|--- 2025-10-28 14:42:09+00:00| seen| https://bsky.app/profile/checkmarxzero.bsky.social/post/3m4b64mdxbs2v...
CVE-2025-53855
creationtimestamp| type| source ---|---|--- 2025-10-28 14:00:05+00:00| seen| https://infosec.place/objects/9fff3064-11ee-49ec-8138-72ef94d4d349...